Privacy Policy - Throne and Liberty Companion

Throne and Liberty Companion (Unofficial)
Last Updated: July 9, 2026

1. Information We Collect

We collect information you provide directly when you create an account, use our services, or contact us for support.

• Email address (for account creation and authentication)
• Game build data (gear, skills, attributes you configure)
• Usage data (app interactions, features used)
• Device information (device type, operating system)

2. Authentication Services

The App requires login and uses Firebase Authentication together with Google Sign-In and Sign in with Apple. When you sign in with a third-party provider, we receive your email address and basic profile information as permitted by your account settings with that provider.

• Email address
• Basic profile information
• Authentication token for secure login

OAuth scope limitations: the App requests only the minimum permissions required for authentication — your email address, basic profile information, and an ID token used solely to verify your identity with Firebase.

Important: the App does NOT request access to your Google Drive files, Gmail messages, Google Calendar, contacts, or any other Google or Apple services. Authentication tokens cannot be used to access any of those services. Sign in with Apple users may use Apple's "Hide My Email" relay; in that case we only ever see the relay address.

3. Local and Cloud Data Storage

Local Storage

User preferences and some app data are stored locally on your device to improve performance and allow offline use.

Cloud Storage

Game build data is stored in Firebase (Cloud Firestore) to enable synchronization across devices. You can access your data on any device where you are logged in. Builds synchronize across devices, progress is saved automatically, and data remains accessible when switching devices.

3.1 Biometric Authentication Data

For users who successfully log in, the App can store encrypted credentials locally to enable biometric authentication (fingerprint on Android, Face ID / Touch ID on iOS) for convenient access.

• The App does NOT collect, store, or transmit your actual fingerprint, face, or any biometric data
• The App uses the platform's secure biometric framework (Android BiometricPrompt / Apple LocalAuthentication) — only a success/failure result is returned to the App
• Only your user ID and email are stored locally, encrypted using the platform's secure storage (Android EncryptedSharedPreferences with Android Keystore / iOS secure storage)
• All locally cached credentials are deleted when you sign out or disable biometric login
• You can disable biometric login at any time in Settings

4. Advertising

The App does not display advertisements, does not use advertising identifiers, and performs no user tracking for advertising purposes. No third-party ad networks are implemented.

5. In-App Purchases

The App is free to use and does not contain in-app purchases or subscriptions. The App does not collect, store, or transmit payment information.

6. Use of Your Information

• Provide, maintain, and improve our services
• Create and manage your account
• Save and synchronize your game builds across devices
• Communicate updates or support information
• Analyze usage patterns to improve the App
• Ensure security and prevent abuse

7. Information Sharing

We do not sell, trade, or otherwise transfer your personal information, except: with your explicit consent, to comply with legal obligations, or to protect our rights, property, or safety, or that of others.

8. Data Security

• Firebase enterprise-grade security infrastructure
• Encrypted data transmission via HTTPS/TLS
• Secure authentication tokens
• Local credential encryption backed by the platform keystore
• No storage of payment information

Note: no method of transmission over the Internet is 100% secure. Absolute security cannot be guaranteed.

9. Children's Privacy

The App is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has submitted data, contact tl.companion.app@gmail.com for immediate deletion.

9.1 Age Verification and Age-Appropriate Experience

Where required by law, the app store (Google Play on Android; the Apple App Store on iOS) verifies the age of users and, for minors, obtains parental consent at the store level. Google Play may share an age signal with the App through the Play Age Signals API. This signal is used only to provide an age-appropriate experience — never for advertising, marketing, profiling, or analytics — and is not retained. When the signal indicates the user is a minor, usage analytics collection is disabled for that user.

10. Content Moderation and Safety

User-generated content (such as public build names or feedback) must not contain profanity or sexually explicit language, racist, discriminatory, or hate-based speech, or harassment, threats, or abusive behavior. Content violating these rules may be filtered, removed, or result in account suspension.

11. Data Retention and Account Deletion

We retain your information for as long as your account is active or as needed to provide services. You can delete your account and associated data at any time:

• In the App: Settings → Account Deletion → Delete Account (removes your cloud data and account immediately)
• By email: see the Account Deletion Request page — processed within 30 days

Encrypted backups may be retained for up to 90 days for technical recovery purposes before being fully purged.

12. Your Rights

You have the right to access, update, or delete your personal information; withdraw consent for data processing; request data portability; and file a complaint with relevant authorities. To exercise your rights, contact tl.companion.app@gmail.com.

13. Firebase Services

The App uses Firebase (a Google service) for authentication, data storage, and other app functionality: Authentication (secure login), Cloud Firestore (data storage), Analytics (usage insights), and Crashlytics (error reporting). Please refer to Google's Privacy Policy (policies.google.com/privacy) for details on Firebase data handling. Google provides data protection equivalent to the commitments in this policy.

14. Third-Party Sign-In Providers

When using Google Sign-In, Google's privacy policy applies to the information Google collects. When using Sign in with Apple, Apple's privacy policy applies. The App only receives the information you authorize the provider to share (email and basic profile). The App receives short-lived ID tokens used only to verify your identity with Firebase; these tokens cannot be used to access your other Google or Apple services.

15. Policy Changes

This Privacy Policy may be updated to reflect changes in app functionality or legal requirements. The current version is always accessible via the App's Legal menu and at this page. Significant changes will be announced in-app or via app store updates.

16. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including the United States, where Firebase servers are located, with adequate safeguards for international transfers, GDPR compliance for EU users, and industry-standard encryption during transfer.

17. Legal Basis for Processing

We process personal data based on: contract performance (providing App services), legitimate interests (App improvement and security), consent (where explicitly given), and legal compliance (where required by law).

Last Updated: July 9, 2026 | This policy applies to the Throne and Liberty Companion app available on the Google Play Store and the Apple App Store.